<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: nichestack tcp\/ip</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-25928: The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow</title><link>https://patchthecve.com/cve/CVE-2020-25928.html</link><guid>https://patchthecve.com/cve/CVE-2020-25928.html</guid><pubDate>Wed, 17 Jun 2026 03:07:27 +0000</pubDate><description>CRITICAL 9.8: The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: DNS response processing functions: dns_upcall(), getoffset(), dnc_set_answer(). The attack vector is: a specific DNS response packet. The code does</description></item><item><title>CVE-2020-25927: The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read</title><link>https://patchthecve.com/cve/CVE-2020-25927.html</link><guid>https://patchthecve.com/cve/CVE-2020-25927.html</guid><pubDate>Wed, 17 Jun 2026 03:07:27 +0000</pubDate><description>HIGH 7.5: The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The impact is: a denial of service (remote). The component is: DNS response processing in function: dns_upcall(). The attack vector is: a specific DNS response packet. The code does not check whether the number</description></item><item><title>CVE-2020-25926: The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transacti</title><link>https://patchthecve.com/cve/CVE-2020-25926.html</link><guid>https://patchthecve.com/cve/CVE-2020-25926.html</guid><pubDate>Wed, 17 Jun 2026 03:07:27 +0000</pubDate><description>HIGH 7.5: The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. The impact is: DNS cache poisoning (remote). The component is: dns_query_type(). The attack vector is: a specific DNS response packet.</description></item></channel></rss>